I can't sleep after this shit... Claude Code just found 12,154 photos of my face on the old Android I used for 8 years. I never took a single one of them.
The front camera was firing almost every time I picked the phone up. In bed, on the train, in the car, or when I just grabbed it to check the time.
They were real camera frames sitting in a hidden folder, each one with a timestamp and a location. None of them were in the Gallery or in Recently Deleted.
I plugged the phone into my laptop, turned on ADB and told Claude Code to look for front-camera files that weren't in my photos. It pulled a folder inside Android/data that belonged to a flashlight app I installed in 2019 and completely forgot about. 12,154 files.
I started scrolling. Almost all of it was from the last 15 months. Then I saw a file created 2 seconds ago, while I was still looking at the folder. The phone kept taking photos of me as I was reading this.
On Android 8 any app with camera permission can shoot in the background, and you get no green dot or any other warning when it does. That flashlight app had camera and location access from day one.
I uninstalled it, took camera access away from everything that doesn't need it and cleared the folder. How many of these photos already went somewhere else, I don't know.
If you want to check yours, plug it in, turn on USB debugging and ask Claude Code to find front-camera files outside your Gallery and show which apps used the camera and when.
Same fun time if you like old school theme - ctf
lnkd.in/p/enEPgG4r
GuyIT retweeted
i couldn't sleep after watching this
i work in osint. i asked my agent to visualise what my scrapers do all night while i sleep. it drew them as crawlers
> 1 agent turns into 256 in 9 seconds
> each one takes a page and reads every word it steps on
> search, forums, feeds, news, shops, public DBs: 16 pages, 2,900+ words in 20 s
everything you've ever posted in public is getting scraped like this. right now
A raw HTTP/1.1 and HTTP/2 request engine that your AI agent can drive over MCP.
Four Python files. No daemon, no browser, no database, no Burp.
github.com/tehut-io/tehut_pr…
GuyIT retweeted
Giveaway time!
Up for grabs is 3 free tickets to our “Attacking AI” live course!
Repost and like to enter!
arcanum-sec.com/training/att…
GuyIT retweeted
Next hacker summer camp giveaway!
3 seats to our “The Bug Hunters Methodology” course!
Like and share to be entered!
arcanum-sec.com/training/the…
GuyIT retweeted
NEWS: Starting Fall 2026, I'm joining @umiamiengineer at the University of Miami as an Assistant Professor of Electrical and Computer Engineering!
I never thought I'd be a professor, so this one is especially exciting for me.
The web was built for humans clicking buttons. The next version will have agents acting for us. I want to study what trust means in that world. I'm also curious about the role open-source models and decentralized AI will play.
I'm starting a lab and recruiting students and postdocs. DMs are open!
🤖 Made with AI
GuyIT retweeted
I was recently laid off, so I’m officially open to new opportunities. If you need a Hacker, or a teachable moment using Red Team tactics. I can also be a trainer, community builder & liaison.
I want more than a job I need a company & purpose I can believe in. Please share!
💜🤗💜
GuyIT retweeted
Day ONE of FIVE days of celebrating our 2 year ARCANUM-VERSARY! @arcanuminfosec
2nd Giveaway - We have 4 Swag Packs up for grabs!
Get a shirt, stickers, pens, a BADGE and more!
👍 1 Like = 1 Entry!
♻️ 1 Share = 2 Entries!
Winners announced 1/21!
enjoy our tshirt models @G0LDEN_infosec and @PhillipWylie 🫶
GuyIT retweeted
Giveaway and new course 🚨
I just released a nuclei course and we have made it a part of our Black Friday bundle. You can get all of our courses for the price of one.
🎁I’ll give some away. All you gotta do is RT & reply with which bundle you want!
hhub.io/BugBountyBundle2025
GuyIT retweeted
New Executive Offense Newsletter - Building AI Hackbots, Hard-Earned Lessons Pt 1
(and course giveaway)
executiveoffense.beehiiv.com…
Giveaway: Retweet this post and be entered to win a seat in Q4s courses! ("Red Blue Purple AI" or "Attacking AI")
Three winners will be chosen next Friday!
🧠💻 Just launched 3 powerhouse updates to your cybersecurity game — and they’re all about automation, AI, and intelligence at your fingertips.
🚀 Week 3
Build ai-hack: Your personal AI hacking assistant in .zshrc
✅ Interprets Nmap scans
✅ Summarizes new CVEs
>>>
✅ Writes PoC exploits — right from your terminal
⚡ Week 4
Drop in ai-nuclei and turn recon into instant AI-analyzed gold
🔍 Runs Nuclei on targets
📊 Parses and ranks vulnerabilities
🧠 Feeds findings into DeepSeek-Coder for AI-powered risk analysis
#CyberSecurity #AIRecon #BugBountyTools #NucleiScanner #ThreatIntel #RedTeaming #DeepSeek #ObsidianNotes
👀 Next Week: The Grand Finale
Full-Stack Bug Bounty Workflow with Local AI
📅 Week 5
Stay one step ahead with daily CVE monitoring + Obsidian integration
📥 Auto-fetch MITRE’s latest CVEs via cron
📝 Pipe summaries into your personal threat intel vault with ai-hack
👉 Dive into the full guide: guyit.co.il



















